Static task
static1
Behavioral task
behavioral1
Sample
380003d8cc1d1a0e762b8aa5bf95e180_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
380003d8cc1d1a0e762b8aa5bf95e180_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
380003d8cc1d1a0e762b8aa5bf95e180_JaffaCakes118
-
Size
93KB
-
MD5
380003d8cc1d1a0e762b8aa5bf95e180
-
SHA1
632e9f32863a97cc008fc8b61359437c8b63fbd5
-
SHA256
c118312853d7b968b5c4512abc54cc2fd95fb8c0ab4c680a0c891c84e8d92911
-
SHA512
d67e09383d722f3a153527090f5ba74cb60d56226da6bd34eda5d833cbb4b02779f7180af6c52e330672d5e5ca82d7a981ba78d990358b27232045efc41c397a
-
SSDEEP
1536:TPZuVg+/SI7Ss2nldKUE2te9RQalyVIgr3rbqGZINhNg9iqu/gY3djAVDm3RZZzy:TkKI752nlxCq/IC3r5IGq5hFRZFKX6/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 380003d8cc1d1a0e762b8aa5bf95e180_JaffaCakes118
Files
-
380003d8cc1d1a0e762b8aa5bf95e180_JaffaCakes118.exe windows:4 windows x86 arch:x86
0ec5f204f5eb9404adb966463ea8ecd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CreateThread
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
IsValidLocale
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQueryEx
msvcrt
fwrite
fseek
strcpy
atol
strncmp
wscanf
user32
RegisterWindowMessageA
GetCapture
DefFrameProcA
GetDesktopWindow
comctl32
ShowHideMenuCtl
InitCommonControls
CreateStatusWindowA
oleaut32
VarWeekdayName
VarI4FromI1
VarI2FromUI4
VarFormat
VarDecDiv
VarCySu
VarCyFromR8
RegisterActiveObject
Sections
.text Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ